KelpDAO Exploiter Moves 75,701 ETH to Mainnet Toward Bitcoin

The wallet linked to the KelpDAO exploit has moved 75,701 ETH to the Ethereum mainnet and begun routing approximately $175 million in value toward Bitcoin, according to on-chain records and reporting from GNCrypto.

What Is Confirmed About the 75,701 ETH Move to Ethereum Mainnet

Blockchain records show the KelpDAO exploiter transferred 75,701 ETH to the Ethereum mainnet. The exploiter's Ethereum address received the funds in a series of transactions visible on Etherscan.

One of the key transfers can be traced through this Etherscan transaction record, confirming the movement of ETH onto the mainnet. The transfer represents one of the larger single-entity fund movements tracked on Ethereum in recent weeks.

The move follows earlier developments in this exploit saga. The Arbitrum Security Council previously froze 30,766 ETH linked to the KelpDAO exploiter on the Arbitrum network, but the funds now arriving on mainnet appear to have taken a different route.

What Remains Unverified

The available evidence does not identify the specific bridge or method used to move the ETH to mainnet. The exact timing of each individual transfer, the intermediate wallets involved, and whether all 75,701 ETH arrived in a single batch or across multiple transactions have not been fully documented in the current reporting.

Why the Reported $175 Million Shift Toward Bitcoin Matters

According to reporting from GNCrypto, the exploiter has begun routing approximately $175 million in value toward Bitcoin. The phrasing "begins routing" indicates that the conversion process is underway rather than complete.

This distinction matters. Routing funds toward Bitcoin could involve multiple intermediate steps, including swaps through decentralized exchanges, cross-chain bridges, or centralized venues. The final amount settled in BTC may differ from the initial estimate depending on slippage, fees, and market conditions during execution.

The directional shift from ETH holdings to Bitcoin exposure is the core development. Moving exploit proceeds across chains complicates recovery efforts, as Bitcoin's UTXO model creates different tracing challenges than Ethereum's account-based system.

What "Routing Toward Bitcoin" Does and Does Not Prove

The language confirms a directional intent, not a completed conversion. Readers should not interpret this as confirmation that $175 million in BTC now sits in the exploiter's wallets. The actual settled amount, the conversion path, and the destination Bitcoin addresses remain unconfirmed.

This development also arrives during a period of broader scrutiny over digital asset security. Separately, the BIS has flagged the $320 billion stablecoin market as a stability risk, underscoring the regulatory attention that large-scale fund movements continue to attract across the crypto ecosystem.

What Readers Should Watch Next in the Wallet Trail

Several key confirmations would advance this story from a headline about fund movement to a fully documented trail. Independent verification of the Bitcoin destination addresses would establish where the converted BTC now resides.

Confirmation of the conversion venues, whether decentralized protocols, cross-chain bridges, or other mechanisms, would clarify the exploiter's operational methods. A final accounting of the settled BTC amount would determine whether the full estimate held through the conversion process.

Specific Confirmations Needed for Follow-Up Coverage

The next meaningful update requires on-chain proof that routed value has settled into Bitcoin wallets rather than sitting in intermediate positions. Until Bitcoin transaction hashes linked to this exploiter are publicly identified and verified, the routing claim remains directional rather than confirmed.

Readers tracking this situation should monitor the evolving landscape of crypto finance and institutional moves alongside the exploiter's Ethereum address for additional outflows and Bitcoin block explorers for incoming transactions matching the expected value range.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.